FIX: "Generate SQL Script" in Enterprise Manager May Not Script Out the Correct Permissions (280361)

SYMPTOMS

• Use of the DENY UPDATE command on one table followed by the use of a GRANT UPDATE command on one or more columns of the same table.
  
  
  For example:

  deny update  on dbo.authors  to user1
  go
  grant update on dbo.authors(address) to user1
  go
  						

  If you use the Generate SQL Script menu item in SQL Server Enterprise Manager, you get the following scripts:

  DENY  UPDATE  ON [dbo].[authors]  TO [user1] CASCADE 
  GO
  
  DENY  UPDATE  ON [dbo].[authors] (
  	[address], 
  	[address]
  	) TO [user1] CASCADE 
  GO
  						

• You grant table level permissions before you grant column level permissions in a single GRANT statement without using WITH GRANT OPTION.
  
  For example:

  grant insert, update on authors (au_lname) to user1
  go
  						

  If we use the Generate SQL Script menu item in the SQL Server Enterprise Manager, you get the following scripts:

   
  GRANT  INSERT  ON [dbo].[authors]  TO [user1]
  GO
  						

  You do not see the GRANT statement for the update permission.